Cert Name In Lemur

[sureshbyella]

I have two questions.

1. I see Lemur creating the certificate as below test.domain.local-<AUTHNAME>-20200617-20220618 (It appends authority name and validity) test.domain.local-<AUTHNAME>-20200612-20220613-3990C7BAC8847B7CD935136A268F8E71F543CE9A when the cert with the same name is enrolled (basically renew) (It appends authority name and validity and serial no)

How do I keep the cert name consistent, so it just adds a serial number at the end (example - cnname-serialnumber). This helps to retrieve the cert via API easily.

2. Is it okay to add custom api's like retrieving the public key, given the cert name via api?

Any suggestions are greatly appreciated.

[hosssha]

Hi @sureshbyella,

sorry for the late reply; if you are performing certificate creation via API, you can also supply your desired certificate name. alternatively it should be possible to add a config to always enable the format which includes the serial number.

Currently you can fetch a certificate which includes the public-key, but it is absolutely okay to add a new API endpoint to fetch the public key via cert-id or cert-name.